Next: ftp event handlers, Previous: ftp variables, Up: ftp Analyzer
ftp
functions
The standard ftp
script provides one function for external use:
is_ftp_data_conn (c: connection): bool
'PORT
” or a “PASV
”
directive.
Also returns true if the source port is 20/tcp
and there's currently
an FTP session active between the originator and responder, in case for
some reason Bro's bookkeeping is inconsistent.